BRIEFLeakhighP55
Full database leak of Bangladesh's gis.gov.bd government portal
gis.gov.bd (Bangladesh)
Detected10 September 2026 · 06:14 UTC
A threat actor is leaking what is claimed to be the full database of gis.gov.bd, a Bangladeshi government GIS portal. A complete government database exposure can include citizen records, staff credentials and internal geospatial data. Public-sector defenders should monitor for downstream credential abuse and data resale.
CategoryLeak
Severityhigh
Priority score55
Detected10 September 2026 · 06:14 UTC
Leak● 38
Base de datos de Blizzard Computer Store (Kuwait) en ventaA seller is offering a database belonging to Kuwait-based Blizzard Computer Store, posted roughly 11 hours ago. The scale is unclear but likely a small retail customer dataset rather than critical infrastructure. Low regional relevance, useful only as general leak-trend monitoring.Leak● 47
Filtración de base de datos de 50 millones de registros de IndonesiaA 50-million-record Indonesian database linked to 'JakartaGhostDigital' is circulating, exposing massive volumes of personal and account data. Leaks this large fuel credential stuffing and fraud that can reach regional services. Check the set for AR-LATAM corporate or government credentials before deprioritizing.Leak● 55
Código fuente y base de 1,1M de usuarios de MediaModifier a la ventaA seller is offering the complete production SaaS codebase of MediaModifier.com plus a database of about 1.1M users across 13 services. Full source plus user data exposes secrets, API keys and authentication logic, enabling account takeover and further compromise of the vendor and its customers. Defenders should flag leaked credentials and embedded secrets for rotation.Leak● 78
153 millones de licencias de conducir de EE.UU. y Canadá a la ventaA seller is advertising a purported 153M-record set of US and Canadian driver's licenses marked '100% verified' and posted just minutes ago. If real, this is one of the largest identity-document leaks, exposing names, license numbers and addresses useful for account takeover, KYC fraud and SIM swaps. Defenders in banking, telecom and government ID verification should treat recent DMV data as compromised.Leak● 42
Base de datos de 300K residentes del óblast de Kémerovo, RusiaA 300K+ record database of Kemerovo Oblast residents is being shared, containing regional government PII. However the title dates it to 2025, making it stale rather than a fresh alert. Useful as background for identity-fraud and targeting tracking, but not a time-sensitive lead.Leak● 42
Venta de datos de la plataforma francesa de vacunación Mes Vaccins (Syadem)A seller is offering data from Mes Vaccins / Syadem, a French vaccination platform, on a dark web forum. Vaccination records include sensitive health and identity data that can be abused for phishing and medical-identity fraud. Scale is unclear, but health-sector leaks warrant monitoring by French defenders.